SITS_RMM_SCRIPTS/1-estudio-Install-TacticalRMM-and-RustDesk.ps1

# author: https://github.com/bradhawkins85
# modified: added RustDesk (ScoutIT-RemoteSupport) silent install with service verification and ID output
$ErrorActionPreference = 'SilentlyContinue'

$innosetup    = 'tacticalagent-v2.10.0-windows-amd64.exe'
$api          = '"https://apirmm.scoutitsystems.com"'
$clientid     = '1'
$siteid       = '1'
$agenttype    = '"workstation"'
$power        = 0
$rdp          = 0
$ping         = 0
$auth         = '"f77cac29dc421abacbfc1882c2700b655f7a4bcf6500aaec040208dc2a5bdbff"'
$downloadlink = 'https://agents.tacticalrmm.com/api/v2/agents/?version=2.10.0&arch=amd64&token=f3c1cbee-7d48-4f2a-8f0a-7cc33bb42802&plat=windows&api=apirmm.scoutitsystems.com'
$apilink      = $downloadlink.split('/')

# ── RustDesk / ScoutIT Remote Support config ──────────────────────────────────
$rustdeskMsi        = 'estudio-scoutit-remotesupport.msi'
$rustdeskDl         = 'https://scoutit.help/estudio-rust'
$rustdeskInstallDir = 'C:\Program Files\ScoutIT-RemoteSupport'
$rustdeskService    = 'ScoutIT-RemoteSupport'

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

# ── Helper: Install RustDesk ──────────────────────────────────────────────────
function Install-RustDesk {
    $msiPath = "$env:TMP\$rustdeskMsi"

    # Download
    Write-Host "Downloading ScoutIT Remote Support client..."
    Try {
        Invoke-WebRequest -Uri $rustdeskDl -OutFile $msiPath
    }
    Catch {
        Write-Warning "RustDesk download failed: $($_.Exception.Message)"
        return
    }

    # Silent MSI install
    Write-Host "Installing ScoutIT Remote Support client silently..."
    Try {
        Start-Process -FilePath "msiexec.exe" `
                      -ArgumentList "/i `"$msiPath`" /qn /norestart CREATEDESKTOPSHORTCUTS=`"N`" INSTALLPRINTER=`"N`"" `
                      -Wait
        Start-Sleep -Seconds 10
    }
    Catch {
        Write-Warning "RustDesk MSI install failed: $($_.Exception.Message)"
        return
    }
    Finally {
        if (Test-Path $msiPath) { Remove-Item -Path $msiPath -Force }
    }

    # Locate the installed exe
    $rustdeskExe = "$rustdeskInstallDir\$($rustdeskMsi -replace '\.msi$', '.exe')"
    if (-not (Test-Path $rustdeskExe)) {
        Write-Host "Searching for RustDesk exe in Program Files..."
        $found = Get-ChildItem 'C:\Program Files' -Recurse -Filter '*.exe' -ErrorAction SilentlyContinue |
                 Where-Object { $_.Name -match 'rustdesk|scoutit|remotesupport' } |
                 Select-Object -First 1
        if ($found) {
            $rustdeskExe = $found.FullName
            Write-Host "Found exe at: $rustdeskExe"
        } else {
            Write-Warning "Could not locate RustDesk exe. Skipping service and ID steps."
            return
        }
    }

    $exeDir = Split-Path $rustdeskExe

    # Install service if not present
    $svc = Get-Service -Name $rustdeskService -ErrorAction SilentlyContinue
    if ($null -eq $svc) {
        Write-Host "Registering ScoutIT Remote Support service..."
        Start-Process -FilePath $rustdeskExe -ArgumentList '--install-service' -Wait
        Start-Sleep -Seconds 20
        $svc = Get-Service -Name $rustdeskService -ErrorAction SilentlyContinue
    }

    # Ensure service is running
    if ($null -ne $svc) {
        $attempts = 0
        while ($svc.Status -ne 'Running' -and $attempts -lt 5) {
            Write-Host "Starting ScoutIT Remote Support service (attempt $($attempts + 1))..."
            Start-Service -Name $rustdeskService -ErrorAction SilentlyContinue
            Start-Sleep -Seconds 5
            $svc.Refresh()
            $attempts++
        }
        if ($svc.Status -eq 'Running') {
            Write-Host "ScoutIT Remote Support service is running."
        } else {
            Write-Warning "ScoutIT Remote Support service did not reach Running state."
        }
    } else {
        Write-Warning "Service '$rustdeskService' not found after install."
    }

    # Get and output the RustDesk ID (visible in RMM job logs)
    Push-Location $exeDir
    $rustdeskId = & $rustdeskExe --get-id 2>&1
    Pop-Location

    Write-Output "................................................."
    Write-Output "ScoutIT Remote Support ID: $rustdeskId"
    Write-Output "................................................."
}

# ── Tactical RMM ─────────────────────────────────────────────────────────────
$serviceName = 'tacticalrmm'
If (Get-Service $serviceName -ErrorAction SilentlyContinue) {
    Write-Host "Tactical RMM Is Already Installed"
} Else {
    $OutPath     = $env:TMP
    $output      = $innosetup
    $installArgs = @('-m install --api ', "$api", '--client-id', $clientid, '--site-id', $siteid, '--agent-type', "$agenttype", '--auth', "$auth")
    if ($power) { $installArgs += "--power" }
    if ($rdp)   { $installArgs += "--rdp"   }
    if ($ping)  { $installArgs += "--ping"  }

    Try {
        $DefenderStatus = Get-MpComputerStatus | Select-Object AntivirusEnabled
        if ($DefenderStatus -match "True") {
            Add-MpPreference -ExclusionPath 'C:\Program Files\TacticalAgent\*'
            Add-MpPreference -ExclusionPath 'C:\Program Files\Mesh Agent\*'
            Add-MpPreference -ExclusionPath 'C:\ProgramData\TacticalRMM\*'
        }
    }
    Catch { # pass
    }

    $X = 0
    do {
        Write-Output "Waiting for network"
        Start-Sleep -s 5
        $X += 1
    } until (($connectresult = Test-NetConnection $apilink[2] -Port 443 | Where-Object { $_.TcpTestSucceeded }) -or $X -eq 3)

    if ($connectresult.TcpTestSucceeded -eq $true) {
        Try {
            Invoke-WebRequest -Uri $downloadlink -OutFile "$OutPath\$output"
            Start-Process -FilePath "$OutPath\$output" -ArgumentList '/VERYSILENT /SUPPRESSMSGBOXES' -Wait
            Write-Host "Extracting..."
            Start-Sleep -s 5
            Start-Process -FilePath "C:\Program Files\TacticalAgent\tacticalrmm.exe" -ArgumentList $installArgs -Wait

            # ── Install RustDesk after Tactical RMM ──
            Install-RustDesk

            exit 0
        }
        Catch {
            $ErrorMessage = $_.Exception.Message
            $FailedItem   = $_.Exception.ItemName
            Write-Error -Message "$ErrorMessage $FailedItem"
            exit 1
        }
        Finally {
            if (Test-Path "$OutPath\$output") { Remove-Item -Path "$OutPath\$output" -Force }
        }
    } else {
        Write-Output "Unable to connect to server"
    }
}